ultimate classified listings vulnerabilities and fixes

Recent CVEs affecting ultimate classified listings, with upgrade or downgrade steps. 5 tracked.

Also searched as: ultimateclassifiedlistings.

ultimate classified listings has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-02-20. Highest priority: CVE-2024-5882 (score 50/100).

• CVE-2024-6529 HIGH 7.1 UPGRADE The Ultimate Classified Listings WordPress plugin before 1.4 does not sanitise and escape a parameter before o
• CVE-2024-5883 MEDIUM 4.7 UPGRADE The Ultimate Classified Listings WordPress plugin before 1.3 does not sanitise and escape a parameter before o
• CVE-2024-5882 HIGH 7.5 UPGRADE The Ultimate Classified Listings WordPress plugin before 1.3 does not validate the `ucl_page` and `layout` par
• CVE-2024-13753 HIGH 8.1 UPGRADE The Ultimate Classified Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi
• CVE-2024-13748 MEDIUM 4.4 UPGRADE The Ultimate Classified Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Tit

FAQ

How do I fix ultimate classified listings vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ultimate classified listings being exploited right now?

None of the tracked ultimate classified listings CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ultimate classified listings CVE should I patch first?

CVE-2024-5882 currently ranks highest (50/100): The Ultimate Classified Listings WordPress plugin before 1.3 does not validate the `ucl_page` and `layout` par.

RSS feed for ultimate classified listings · ← Back to latest CVEs